10
Novell Sentinel Log Manager 1.0.0.4 Release Notes
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
5.2.1 Enhancement
Top N type reports are now supported. A Top N type report named
All Vendors All Products
Top 10 Report
is installed with this hotfix and is available as a Visualization from the Search Save
As Report dialog as well from the main report list. This report provides an easy way to view a
dashboard of the most frequent activity being monitored by Sentinel Log Manager.
556411
Issue: Squashfs indexes that were mounted by a previous running
instance of the server are not cleaned up when the server starts, resulting
is failed searches.
Fixed: The server now detects if old mounts need to be cleaned up and
cleans them up allowing searches to complete normally.
552519
Issue: The softwarekey.sh script was not included in the install, making it
difficult to reset the license key with the server turned off.
Fixed: The softwarekey.sh script is now included.
549582
Issue: An event is not searchable by its original timestamp if it arrives
more than a day late.
Fixed: The event is searchable by its original timestamp no matter how
late it arrives.
546324
Issue: A rule or data retention policy configured with a filter that is just a full
text search (i.e., no field such as
sev:5
is specified) results in an error on
the server that prevents any users from logging into the Web interface or
ESM user interface.
Fixed: The bug is fixed so that all valid filters are now accepted and
evaluated properly. Filter validation is also done before allowing a user to
save a filter to prevent an invalid filter from being saved that would cause
logins to fail.
545837
Issue: The Event Source Management (ESM) user interface is not able to
read the maxclausecount property in the
SentinelPreferences.properties
file.
Fixed: The Event Source Management (ESM) user interface works fine
with a high number (>=~1000) event sources and does not log any
max
clause count exceeded
exceptions.
545197
Issue: When many event sources are configured (for example, 2000+), the
Event Source Management (ESM) user interface consumes lot of memory
on webstart (for example, 1GB) and also becomes unusable.
Fixed: The ESM user interface now works fine if there are many event
sources are configured.
527007
Issue: To turn on or off the data logging for all of the operating system
event sources and all of the Application collectors, a
Data logging (All) On
and Off
option is required for the
APPLICATIONS
and
OS
tables under the
Collection
>
Syslog Server
tab.
Fixed: To turn on or off the data logging for all of the operating system
event sources and all of the Application collectors, a
Data logging (All) On
and Off
option is provided for the
APPLICATIONS
and
OS
tables under
the
Collection
>
Syslog Server
tab.
Issues Fixed
Description
